diff --git a/TODO b/TODO
index 331fa97b..1d8f89b8 100644
--- a/TODO
+++ b/TODO
@@ -1,3 +1,3 @@
 * Find a way to make the couple (name, project) unique.
 * Use a psql backend rather than sqlite
-* If the members list of a project is empty, propose the user to define the members
+* Deal with spammers. If our system is able to send invitation emails easily, it should'n be used by spammers. (Is this really a concern? Do we need to put a captcha in place?)